Nprobe is paywalled past 25000 flows. Not an option for me and I do not feel like ng provides the easy to digest top talkers like ntop did.
So without ntopng being able to consume netflow natively and some more UI devil, for my purposes I feel like the last, stable and fairly recent ntop should do. I'm just looking for it to do the thing it's mainly advertised to do and is used out in IT land for most. It worked fine with a mirror port but I want the netflow detail. I feel like I may be misconfiguring something? It's as if after the first minute or so and ntop not "unsticking" , the data on the page is wrong from then on. At the same time, I'm inclined to say all other stats are fine on other pages. On Apr 4, 2014 5:37 PM, "Dpto. Datos Television Costa Blanca" <[email protected]> wrote: Hi, Ntop is EOL and Im using ntopng without nprobe and it works perfectly. If you have any problem using ntopng, just ask here. Best Regards, El 04/04/2014 21:32, Daniel Dudkin escribió: Hi, With NtopNG relying on paywall’ed nprobe, I need to use the last stable version of ntop to get an overview of whats going on in my network. I mainly need it to identify bandwidth hogs and for the most part hang out in the “Top Talkers” area. I used to have ntop setup on SPAN ports. Recently, I installed a Cisco 891 router and am exporting netflow from all my VLANs (I have about 5) with “ip flow ingress” and “ip flow egress” on each vlan. Ntop reads this data, but I realized the top talkers list is completely wrong and I can’t explain its behavior. I’ve tried several renditions of ntop and even tried compiling it on the machine its running on (CentOS 32bit). It seems as though once a host reaches the top, it stays on the top talkers list and reports its top peak usage, as the current minute usage (if looking at top talkers by hour). So for instance, my public IP host will shoot to the top of the list doing ~2Mbit /sec. Despite KNOWING that the throughput is different (viewing stats on the Cisco or generating even more traffic), as the toptalkers list populates with future data/minutes – the host will stay there and report ~2Mbit /sec. I tried netflow v5, v9. Setting low timeouts, etc. I REALLY need this to work as I don’t know of any other good open source solution for such a good birds eye view of the status of my live network. I managed a very limited pipe and need to be able to answer who is hogging my bandwidth. Appreciate any help. Daniel Dudkin IT Business/System Specialist // American Auto-Matrix One Technology Lane // Export, PA 15632 www.aamatrix.com<http://www.aamatrix.com/> • [email protected]<mailto:[email protected]> Ph #: 724-733-0381 [both] Confidential: This electronic message and all contents contained may be privileged, confidential or otherwise protected from disclosure. The information is intended to be for the addressee only. If you are not the addressee, any disclosure, copy, distribution or use of the contents of this message is prohibited. If you have received this electronic message in error, please notify me immediately by return email and destroy the original message and all copies. _______________________________________________ Ntop mailing list [email protected]<mailto:[email protected]> http://listgateway.unipi.it/mailman/listinfo/ntop -- Daniel Baeza Centro de Observación de Red Dpto. Internet y Telefonía Television Costa Blanca S.L. Telf. 966190565 WEB: http://www.tvt.es Correo: [email protected]<mailto:[email protected]> --AVISO LEGAL-- En cumplimiento de la Ley Orgánica 15/1999, de 13 de diciembre de protección de datos de carácter personal, se pone en conocimiento del destinatario del presente correo electrónico, que los datos incluidos en este mensaje, están dirigidos exclusivamente al citado destinatario cuyo nombre aparece en el encabezamiento, por lo que si usted no es la persona interesada rogamos nos comunique el error de envío y se abstenga de realizar copias del mensaje o de los datos contenidos en el mismo o remitirlo o entregarlo a otra persona, procediendo a borrarlo de inmediato. Asimismo le informamos que sus datos de correo han quedado incluidos en nuestra base de datos a fin de dirigirle, por este medio, comunicaciones comerciales, profesionales e informativas y que usted dispone de los derechos de acceso, rectificación, cancelación y especificación de los mismos, derechos que podrá hacer efectivos dirigiéndose a Televisión Costa Blanca, S.L., C/ San Policarpo 41 Bajo. C.P: 03181 Torrevieja (Alicante).
<<inline: ATT00001.png>>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
